gcloud kms keys versions get-certificate-chain

NAME: gcloud kms keys versions get-certificate-chain - get a certificate chain for a given version
SYNOPSIS: gcloud kms keys versions get-certificate-chain VERSION [--certificate-chain-type=CERTIFICATE_CHAIN_TYPE; default="all"] [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] [--output-file=OUTPUT_FILE] [GCLOUD_WIDE_FLAG …]
DESCRIPTION: Returns the PEM-format certificate chain for the specified key version. The optional flag output-file indicates the path to store the PEM. If not specified, the PEM will be printed to stdout.
EXAMPLES: The following command saves the Cavium certificate chain for CryptoKey frodo Version 2 to /tmp/my/cavium.pem:
gcloud kms keys versions get-certificate-chain 2 --key=frodo --keyring=fellowship --location=us-east1 --certificate-chain-type=cavium --output-file=/tmp/my/cavium.pem
POSITIONAL ARGUMENTS: VERSION

Name of the version from which to get the certificate chain.
FLAGS: --certificate-chain-type=CERTIFICATE_CHAIN_TYPE; default="all"

Certificate chain to retrieve. CERTIFICATE_CHAIN_TYPE must be one of: all, cavium, google-card, google-partition.

--key=KEY

The containing key.

--keyring=KEYRING

Key ring of the key.

--location=LOCATION

Location of the keyring.

--output-file=OUTPUT_FILE

Path to the output file to store PEM.
GCLOUD WIDE FLAGS: These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES: These variants are also available:
gcloud alpha kms keys versions get-certificate-chain

gcloud beta kms keys versions get-certificate-chain